AdvisorEvents.com Secure GroupWise with SSL Author: Tay Kratzer & Gregg A. Hinchman Company: Novell, Inc. & Hinchman Consulting Session Number

AdvisorEvents.com Who Am I?  Tay Kratzer GroupWise Enthusiast for 10+ years GroupWise Enthusiast for 10+ years Novell Employee – Primary Support Engineer Novell Employee – Primary Support Engineer Author/Co-Author: 5 GroupWise related books at Author/Co-Author: 5 GroupWise related books at Frequent writer for: GroupWise Advisor Magazine, and Novell Periodicals Frequent writer for: GroupWise Advisor Magazine, and Novell Periodicals  Gregg A. Hinchman GroupWise Advocate and Consultant for 9+ years Self-Employed Consultant Former Novell Consultant Co-Author of “Success with GroupWise Document Management” at

AdvisorEvents.com Session Overview  Introduction What is SSL? What is SSL? Assumptions and Prerequisites Assumptions and Prerequisites  Securing GroupWise Secure the MTA Secure the MTA Secure the POA Secure the POA Secure the GWIA Gateway Secure the GWIA Gateway Secure the WebAccess Gateway Secure the WebAccess Gateway  Summary Review Review Tips, Tricks and Questions Tips, Tricks and Questions

AdvisorEvents.com What is SSL?  Encryption Symmetric Key Encryption Symmetric Key Encryption  One Key Public Key Encryption (PKI) Public Key Encryption (PKI)  Two Keys  Certificate Authorities A Private Key A Private Key The Certificate Signing Request The Certificate Signing Request A Certificate A Certificate KMO KMO  SSL CertificateDNS  SSL CertificateDNS  SSL CertificateIP  SSL CertificateIP

AdvisorEvents.com Assumptions and Prerequisites  eDirectory 8.6 or above  GroupWise 6.5 or above  NICI (Novell International Cryptography Infrastructure)  PKI Snap-ins for ConsoleOne  Create a Certificate with GWCSRGEN

AdvisorEvents.com Secure the MTA  Add the Certificate to the MTA

AdvisorEvents.com Secure the MTA  Enable SSL on the MTA  Do not forget to enable SSL for the HTTP Monitoring

AdvisorEvents.com Secure the MTA  Test the Communication

AdvisorEvents.com Secure the POA Add the Certificate Add the Certificate Enable SSL and HTTP Monitoring Enable SSL and HTTP Monitoring What is “SSL Required”? What is “SSL Required”? Test Communication Test Communication

AdvisorEvents.com Demonstration Time

AdvisorEvents.com Secure the GWIA Gateway  eSMTP and Transport Layer Security (TLS) Supported by GroupWise 6.5 Supported by GroupWise 6.5  Add the Certificate  Enable SSL and HTTP Monitoring  Test Communication Telnet and EHLO Telnet and EHLO

AdvisorEvents.com Secure the WebAccess Gateway -The Agent  Add the Certificate  Enable SSL and HTTP Monitoring  Test Communication

AdvisorEvents.com Secure the WebAccess Gateway -The Application for Apache  Add SSL to Apache  Edit the *.CONF file Adminserv.conf, GWApache.conf, HTTPD.conf Adminserv.conf, GWApache.conf, HTTPD.conf Sys:\Apache\conf Sys:\Apache\conf LoadModule tls_module modules/mod_tls.nlm SecureListen :443 "SSL CertificateDNS" SecureListen :443 "SSL CertificateDNS"</IfModule>  Test –TCPCON and 443

AdvisorEvents.com Secure the WebAccess Gateway -The Application for Novonyx  Add SSL to Novonyx  Edit MAGNUS.CONF SYS:NOVONYX\SUITESPOT\HTTPS- \CONFIG SYS:NOVONYX\SUITESPOT\HTTPS- \CONFIG  Test

AdvisorEvents.com Secure the WebAccess Gateway -3 rd Party Cert and Wireless  Create a new custom KMO in eDirectory  Generate a CSR from the KMO object  Submit the CSR to an external CA, such as Verisign  Import the Certificate from Verisign into eDirectory  Reference the custom KMO in the *.CONF file of the web server, Example: Apache syntax is: LoadModule tls_module modules/mod_tls.nlm SecureListen :443 "VERISIGN-SSL" SecureListen :443 "VERISIGN-SSL"</IfModule>

AdvisorEvents.com Secure the Messenger  Add the Certificate  Enable SSL and HTTP Monitoring  Test Communication

AdvisorEvents.com Demonstration Time

AdvisorEvents.com Summary  Review  Tips, Tricks and Questions

AdvisorEvents.com A DVISOR S UMMIT Web Update Page AdvisorEvents.com/CNG0310p.nsf/w/cng0310ud This session WILL / WILL NOT have updates.

AdvisorEvents.com Thank You! Please remember to fill out your evaluation.